Clear About Your Data. Careful With Your Privacy.

1. Who we are

SparkHub360 provides website, software, SEO, digital marketing and related business technology services. For personal information collected through this website, SparkHub360 determines the purposes for which that information is used.

Privacy contact: hello@sparkhub360.com

2. Scope of this policy

This policy applies to personal information collected through our public website, contact and enquiry forms, callback requests, quotation requests, service enquiries and related communications initiated through the website.

It does not automatically govern a client's own customers, employees or users merely because SparkHub360 provides technology or digital services to that client. Where we process information only on instructions of a client, the client's own privacy terms and the applicable service agreement may also apply.

3. Personal information we may collect

Depending on how you interact with us, we may collect:

4. Sensitive personal data

Our normal public enquiry forms are not designed to collect passwords, bank or payment-card information, health information, medical records, biometric information, sexual-orientation information or other sensitive personal data described under the SPDI Rules.

5. How we collect information

We may collect information:

• directly from you when you complete a form;
• when you contact us by email, phone, WhatsApp or another channel;
• automatically from normal website and server operation;
• from campaign/referral parameters attached to your visit; and
• from a business representative who is authorised to contact us on behalf of an organisation.

6. Purposes for which we use information

We may use personal information where reasonably necessary to:

• receive, review and respond to your enquiry;
• arrange a callback requested by you;
• understand your project, service or business requirement;
• prepare proposals, quotations or other commercial communications after review;
• communicate about an existing or proposed business relationship;
• operate, secure, maintain and troubleshoot our website and systems;
• detect or prevent spam, abuse, fraud and unauthorised activity;
• measure enquiry sources and improve website or campaign performance;
• maintain appropriate business and audit records; and
• comply with applicable legal, regulatory, accounting or lawful authority requirements.

We do not use an enquiry submission itself as proof that you have accepted a quotation, entered into a contract or agreed to a final project price.

7. Consent, choice and withdrawal

Where our processing depends on your consent, we aim to provide a clear notice at or before the point of collection describing the information requested and why it is required. You may choose not to provide optional information.

You may withdraw a consent previously given to us by contacting the privacy or grievance contact listed below. Withdrawal will apply prospectively. It will not automatically invalidate processing that was lawful before the withdrawal, and we may still retain or process information where another legal requirement or permitted purpose applies.

If information is necessary to respond to or perform a service you requested, refusing or withdrawing that information may mean we cannot continue that particular request or service.

8. Cookies, sessions and analytics

The website may use essential cookies or similar browser storage for security, session management, form protection and normal site operation.

If optional analytics, advertising or campaign measurement technologies are enabled, we will use them in accordance with the notice and consent choices applicable to those technologies. Campaign parameters such as UTM values may be associated with an enquiry to understand how the enquiry originated.

9. When information may be shared

We do not sell personal information submitted through our enquiry forms. We may disclose information only where reasonably necessary, including to:

• authorised personnel who need it to handle an enquiry or service;
• hosting, infrastructure, backup, security or technical support providers;
• email, communication or business-system providers used to respond to you;
• professional advisers such as accountants or legal advisers where necessary;
• a successor or acquirer in connection with a genuine business restructuring, subject to applicable law; or
• government, regulatory, judicial or law-enforcement authorities where disclosure is required or permitted by law.

Where a service provider processes information on our behalf, we expect it to process that information for the relevant service and apply appropriate confidentiality and security safeguards.

10. Processing and transfers outside India

Some infrastructure or service providers may process or store information in locations outside India. Where personal information is transferred or made available outside India, we will handle such transfer in accordance with applicable Indian law and any restrictions or requirements that apply to the relevant data or service.

Where the SPDI Rules apply to sensitive personal data, transfers will be handled subject to the protections and conditions required by those rules. As DPDP transfer provisions become applicable, we will also comply with restrictions or requirements notified by the Central Government.

11. How long we retain information

We do not intend to keep personal information indefinitely. Retention depends on the purpose for which the information was collected and may consider:

• whether an enquiry remains active;
• whether a customer or contractual relationship develops;
• business record, warranty, support or dispute requirements;
• security, fraud-prevention and audit requirements; and
• applicable legal, tax, accounting or regulatory obligations.

Information that is no longer reasonably required will be deleted, anonymised or otherwise disposed of in accordance with our processes and applicable law. Where future DPDP retention or log-preservation requirements apply, we will observe those mandatory periods.

12. Security practices

We use reasonable technical and organisational measures designed to protect information against unauthorised access, disclosure, alteration, loss or misuse. Depending on the system and risk, these measures may include:

• HTTPS and secure transmission controls;
• access controls and role-based administrative permissions;
• CSRF protection, validation, rate limiting and anti-abuse controls;
• secure credential handling and restricted administrative access;
• server, application and security logging;
• backups and recovery procedures; and
• reasonable security requirements for relevant service providers.

No internet or storage system can be guaranteed to be completely secure. If you believe information sent to us has been compromised, contact us promptly using the details below.

13. Personal data breaches

If we become aware of a personal-data or security incident, we will assess the nature and impact of the incident, take reasonable containment and remediation steps, and make notifications required by applicable law.

As the relevant DPDP breach-notification requirements become applicable, our incident process will be maintained to support required notifications to affected individuals and the Data Protection Board of India within the applicable statutory framework.

14. Your privacy choices and rights

Subject to applicable law, you may contact us to ask us to review or correct personal information you previously provided, withdraw consent where the processing is based on consent, or raise a grievance about our handling of your information.

As the relevant provisions of the Digital Personal Data Protection Act become applicable, eligible Data Principals may also exercise statutory rights such as access to prescribed information about processing, correction, completion and updating, erasure in appropriate circumstances, grievance redressal and nomination.

15. Children's personal data

Our website and business services are directed primarily to businesses and persons capable of making business enquiries. We do not intentionally ask children to submit personal data through our general enquiry forms.

If you are a parent or guardian and believe a child has provided personal information to us without appropriate authority, contact the Grievance Officer. As applicable DPDP child-data provisions come into force, we will apply the required verifiable-consent and other safeguards to processing that is subject to those provisions.

16. Third-party websites and services

Our website may link to social networks, messaging services, client sites or other third-party services. Their privacy practices are controlled by those third parties. You should review the relevant third-party privacy notice before providing information directly to them.

17. Changes to this Privacy Policy

We may revise this policy to reflect changes in our website, services, processing activities, service providers or applicable law. The effective or last-updated date displayed on this page identifies the current version.

Where a change materially affects how information previously collected is handled and additional notice or consent is required by law, we will take appropriate steps before applying that change.

18. Privacy contact and Grievance Officer

Privacy questions, correction requests, consent withdrawal requests and complaints about the handling of personal information may be sent to the contact below.